Install SASL GSSAPI

Since Kerberos and LDAP require SASL  GSSAPI in order to work together, you will need to install the cyrus-sasl-gssapi package. This can be done from the Terminal with yum:

sudo yum -y install cyrus-sasl-gssapi

Assuming kinit netid works and your Kerberos ticket has not yet expired, you can proceed to test GSSAPI using ldapsearch as follows:

ldapsearch -Y GSSAPI -LLL "(uid=netid)"